Re: [FW-1] NAT Between Firewalls

[Blake Updyke <BUpdyke@FW1-NOSPAMMERIDIANAUTOSYSTEMS.COM>]

Here is a link to a configuration document for what you want to do.  I have
only tried it between our V4.1 firewall and a Cisco PIX and was
unsuccessful because of the limitations of Cisco PIX.  Hopefully your
customer has a Checkpoint firewall.  Good Luck.

https://support.checkpoint.com/public/idsearch.jsp?id=55.0.206&QueryText

%28%22pix%22%29&





                    Sean Donaghey/HDGH
                    <SDonaghey@HDGH.ORG>                        To:
                    Sent by: Mailing list for discussion        FW-1-MAILINGLIST@beethoven.us.checkpoint.com
                    of Firewall-1                               cc:
                    <FW-1-MAILINGLIST@beethoven.us.check        Subject:     [FW-1] NAT Between Firewalls
                    point.com>


                    12/05/2002 10:06 AM
                    Please respond to Mailing list for
                    discussion of Firewall-1







I am trying to setup a VPN connection between my company and a vendor, and
we are having problems with IP address's being used.  We use a 10.0.0.0/8
network, and the 2nd party has a customer on their firewall with a
subnetted 10.? network, and our network objects cannot coexist with this
other companies network objects as our Class A subnet takes over the whole
subnetted 10. network.

Can I do a Destination Static NAT translation to another internal address
so that this 2nd party firewall can connect to ours?  If we could mask the
2 required servers on our end with 2 other IP's that the 2nd firewall does
not have defined on their firewall, would they see the servers correctly?

I am running Checkpoint v4.1 SP3 on a Nokia IP440 box, and the other
company is running a SonicWall firewall.

Thanks,

Sean



The information contained in this email is confidential and protected by
law.  The information is intended only for the person or organization
addressed in this email.  If you share or copy the information you are
breaking the law.  If you have received this email by mistake, please
delete it and notify the sender of the email by the telephone number listed
on this email.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================